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1. INTRODUCTION 

In recent times, interior permanent magnet synchronous motor (IPMSM) has drawn major attention 
in traction applications, particularly in electric vehicle (EV) propulsion systems [1]. As compared to its other 
counterpart i.e. surface permanent magnet synchronous motor (SPMSM), IPMSM is preferred for its salient 
features such as high power density, high efficiency and better field weakening capability for constant power 
operation, which is a typical case for electric traction system [2]. IPMSM drive employs closed-loop control 
for high-performance vector control implementation, which in turn requires one position and at least two 
current sensors [3]. 

The most important safety requirement in the traction drive system demands an unbroken control 
loop for nonstop motor operation, even in a faulty sensor system. Therefore, the electric vehicle safety 
research nowadays focuses greatly on fault detection and fault tolerant control (FTC) of the drive system. 
Nonetheless, the studies on fault detection and reconfiguration techniques have found that most of the 
research work is based on motor winding faults [4]—[6] and inverter switch faults [7]-[9]. 

Another reason for control loop failure of IPMSM drive is due to malfunction of the feedback loop 
sensors employed for outer loop speed and internal loop current control [10]. Fault detection and tolerant 
control techniques are reported for only speed sensor fault [11], [12], for only current sensor fault [13], [14] 
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and for both speed and current sensor faults [15], [16]. Sensor fault detection techniques generally are of 
three types i.e. signal-based [7], [17], model-based [16], [18], [19] and knowledge-based [20]. 

Kommuri et al. [19], explained a robust fault detection scheme based on a bank of higher order 
sliding mode (HOSM) observer to detect position, voltage and current sensor fault in a PMSM drive. Because 
of its several advantages over rotational permanent magnet synchronous motors, the primary permanent 
magnet linear motors are generally used for subway applications [14]. Current sensor fault detection and 
isolation for vector control of induction motor drives is proposed in [10], where the elementary concept on 
axis transformation is introduced. The efficacy of the proposed method is justified with respect to transient 
and steady-state performance and verified with the experimental results. In post-fault operation, motor phase 
currents can also be reconstructed from a single dc-link current sensor [21] which is rarely mounted in 
PMSM drive system. Moreover, without proper sampling of dc link current, current reconstruction may not 
be successful. Speed sensor-less field-oriented control of PMSMs is possible using a nonlinear sliding mode 
observer, which utilizes two current sensor information. A fault tolerant control scheme based on current 
space vector error reconstruction is proposed in [22] for the PMSM drive. 

From the foregoing discussion, it is clear that the severity of the current sensor fault is significant in 
traction application as it requires a multi-motor drive system [14]. Through an extensive literature survey on 
current sensor fault detection and localization techniques [7], [13], [17], it has been found that sensor fault 
detection time is a function of motor current fundamental period and varies depending on the speed and 
torque demand of the drive. Hence, two important points emerge in the context of current sensor fault 
detection. Firstly, the detection time should be fast, and secondly, the detection time should be irrespective of 
the drive operating condition. Current sensor fault remedial measure is also a challenging task for ensuring 
successful FTC of the drive. Several extensive FTC studies have also been carried out on induction motor 
drives [10], [23]-[26]. Survival control strategies are adopted either by switching closed loop to open loop 
[23], [25] or continuing closed loop operation by the corresponding signal from the available observer [10], 
[19], [27]. Unlike in case of induction motor, the first fault tolerant survival control strategy as mentioned 
above is not suitable for synchronous motor drives due to instability and loss of synchronism [28]. Hence the 
FTC method for PMSM drive should be robust and independent of the motor model, which is an important 
consideration in this paper. Even more important requirement for FTC of the drive is that detection of faulty 
current sensor and it's reconfiguration should be integrated with the drive control system for faster switching 
from normal operation to FTC. 

This paper presents a simple but effective fault tolerant control method using only one surviving 
current sensor for a 100 KW IPMSM traction system which utilizes the maximum torque per ampere 
(MTPA) algorithm. The performance of the proposed method is investigated under various test circumstances 
and sensor fault conditions applicable for electric vehicle traction systems. Moreover, a processor in loop 
(PIL) test using the cost-effective digital signal processor (DSP) (TMSF28379D) is conducted to demonstrate 
the real-time viability of the proposed method. 


2. MATHEMATICAL MODEL OF IPMSM 

The mathematical model of IPMSM can be derived by neglecting hysteresis loss, eddy current loss 
and saturation while considering the induced emf as sinusoidal. However, the effect of saturation can be 
taken into account with parameter changes. The voltage equations for IPMSM in rotating reference frame (d- 
q) can be modelled as given in (1), where Rs is the stator resistance, Lg and Lgare the stator inductances in 
the d-q axis, We is the rotor electrical speed, Oe is rotor electrical position, ¥ is the magnetic flux linkage, P, 
is the number of pole pairs, and p is the derivative operator. 


=P oe rtea lil * Lov) 
KI | wba Ret pligl Lgl T losy (1) 


The (1) can be rewritten in the form of (2), where the second term of the equation is the expression for 
extended back emf (EEMF). 


“= ee rll oros eee 2 


The (2) is transformed to (3) in the stationary reference frame (a-ß) 
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K = | Rs + pLa We (Lq = n H + 
Vg We (La — La) Rs + pLa Ip 


(3) 
—siné 
(veld — Layla +4] + (Ld -= LDO) | cosa,” 
The torque equation of IPMSM is given below in (4). 
T = 1. 5[Ppp1q + Powella — La)lalq] (4) 


3. FAULT TOLERANT CONTROL SYSTEM OF IPMSM 

The fault tolerant control (FTC) design employs a field-oriented control (FOC) approach to improve 
electric motor efficiency and enable motors to operate at optimum torque. The precise and quick speed 
control of FOC is suitable for applications with dynamic load fluctuations such as electric vehicles. The FTC 
architecture is illustrated in Figure 1. The fault diagnosis part is also embedded in the drive control system. 
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Figure 1. Fault tolerant control system model 


3.1. Controller model of IPMSM 

Considering the traction application, control algorithm may be employed to run the IPMSM below 
and above the base speed as desired. In field-oriented control, IPMSM runs maximum up to base speed 
which is limited by the back emf, rated current and stator voltage of the motor. However, field weakening 
control is implemented over the base speed by setting negative d-axis current, which in turn again reduces 
flux linkage. Depending on the torque-current characteristic of the IPMSM, the reference d-axis current also 
limits the reference q-axis current, limiting the motor torque. Therefore, the motor operation slides from the 
constant torque region under the base speed to the constant power region over the base speed with a limited 
torque capability. 

Considering the inverter current and voltage constraints, the motor phase current I, and the motor 
terminal voltage V, are defined as (5) and (6). 


Ig = B+R < Ip (5) 


Va = [Vi + VŽ < Vin (6) 


Where, I,, is maximum tolerable phase current at ambient temperature and V,, is maximum available 
terminal voltage of the inverter. The reference Va and V, are computed by (7) and (8). 


Va = —Weligig (7) 
Vy = We(Laia + Y) (8) 
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The presence of saliency (Lg < Lg) in the rotor circuit of IPMSM produces reluctance torque in 
addition to the electromagnetic torque. Therefore, the maximum torque can be achieved in the constant 
torque region by calculating optimal current values of Iq mtpa and Ig mtpa from the torque equation according 
to the maximum torque per ampere (MTPA) algorithm [29]. 


i ek eg, en wy 
dmtpa — 4(Lq-La) 16(Lq-La)? 2 


ig mtpa = i + Ii mip (10) 


Therefore, the field weakening current values of Iq fw and Iq fw are derived from (7)—(8) and satisfying the 
relation of (6). 


; yi [v2 ; 
la_fw = ig? Ta Bet (Laig)? (11) 


ig pw = |h + li fw (12) 


(9) 


Due to large inductance, IPMSM has significant cross-coupling effect which even becomes worse in 
the field weakening region as the speed increases. Hence the cross-coupling effect needs to be cancelled. In 
order to improve the overall current transient response, the d-axis and the q-axis currents are decoupled via 
feed-forward pre-control. 


Vg = Ua — weLqi (13) 


Vj = Ug + We(Laia + Y) (14) 


3.2. Current sensor fault detection 

Two physical current sensors (for phase-A and phase-B) are the minimum required for the 
successful operation of the drive since the remaining phase current (phase-C) can be calculated 
mathematically. According to Figure 2, the measured a-b-c phase currents are first converted into a-B axis 
currents and then converted to d-q axis currents by the clark transformation and park transformation, 
respectively. 

The key idea behind the fault detection logic is the change detection in the d-q axis current for any 
sudden change in the measured a-b phase current. With the advancement of real-time MCUs and fast current 
loop technology, the current loop bandwidth can be increased to a large value that yields a very short 
sampling time for current loop calculation. The sampling interval is thus much shorter than the electrical time 
constant. The speed loop bandwidth is also lower than the current loop bandwidth. Therefore, the electrical 
speed can be considered as almost constant and the motor current varies almost linearly during the entire 
sampling interval. The d-q axis current sample values are compared with the previous sample values. The d-q 
axis current at sampling interval (n+1) will just somewhat deviate from the previous sample when both the 
current sensors are working properly. On the flip side, though, the deviation turns out to be larger when any 
one of the current sensors becomes faulty. Aiming to comprise both the d-q coordinates, the sum of the 
squared magnitude of the current error vector is considered as the current residual (€,) for further logical 
comparison with respect to a preset threshold. The value of the current residual is very high during the faulty 
sensor condition and comparatively low otherwise. Hence, for any of the current sensor failure either at any 
phase, the logic comparator (>) gives a high signal to the corresponding S-R flip-flop in that phase. 

It is vital to be noted here that there is no definite way to determine the threshold value since it 
depends on the operating point of the drive. In a healthy system, the current residual always lies within the 
expected range, so the threshold value is set by a few trial-and-error runs. However, the threshold value is 
load-dependent, and it is difficult to set the threshold at a light load. To encounter this loading problem, a 
simple adaptive threshold (A,,), as a function of 1% of Ig current is selected in our case as I, current depends 
on the load. In addition, the absolute values of the current signals in each phase are also kept under the 
scanner by another logical comparator that verifies whether the signal value is zero (I,,) or not at the instant 
of fault in the corresponding phase. Instead of exact zero value, It, is chosen carefully considering sensor 
noise. On the occurrence of any of the current sensor faults, both the high signals from the first S-R latch and 
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the corresponding logical operator (= =) are further processed by an AND logic for the final output. As a 
consequence, the misfiring probability by the fault detection logic can be cancelled out. The outputs from the 
AND logic of each phase are given to a pair of two cross coupled S-R latches. Finally, the outputs of the two 
cross coupled S-R latches (Qa, Q») are linked to the current sensor fault reconfiguration module. The high 
value of any of the two cross coupled S-R latches (Qa, Qp) indicate the corresponding phase current sensor 
fault. 


Figure 2. Current sensor fault detection logic 


3.2.1. Reconfiguration of faulty current sensor 

The IPMSM speed control system model mainly includes three PI controllers. One PI controller is 
employed for outer loop speed control, whereas the other two PI controllers are employed for inner loop 
current control in the d-axis and q-axis, respectively. The process of reference d-q axis current generation is 
discussed in section 3.1. However, the feedback d-q axis currents are obtained by transforming three-phase 
(a-b-c) current to two-phase (a-B) current using clark transformation and then a-f phase current to d-q axis 
current using park transformation. In space distribution, generally, the a-axis is aligned with the a-phase, and 
the corresponding clark transformation is given by (15). If the a-axis is shifted by 120° anticlockwise to be 
aligned with the b-phase as shown in Figure 3, the clark transformation, in this case, is given by (16). 


W-E Je 7 
e]=[2 [tl 46 


Figure 3. Space distribution of a-axis and shifted a-axis 


From (15) and (16), it is clear that the a-axis current and the shifted a-axis current are dependent 
only on the a-phase current and the b-phase current, respectively. Therefore, the a-axis current can always be 
regulated in case of either current sensor failure, no matter which phase is faulty. Hence, for the fault tolerant 
control action, only the B-axis current is needed to be estimated. If the control system is well designed that 
satisfies all transient and steady-state criteria of the IPMSM drive, then the B-axis current can be estimated 
from the reference d-q axis current [10], which is represented by (17) and (18). 
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Iq ele ee —sin6, Fa (17) 
Ip est sin®, cosO. | Ug ref 

lar F ea — 30°) -sin(@, — | f a (18) 
lb Test sin(@, — 30°) cos(6, — 30°) | Ll4 ref 


Depending upon the operational status of both the current sensors as described in Table 1, continuity 
of the feedback a-B axis current can be maintained by the faulty current sensor reconfiguration unit, once the 
particular current sensor fault is identified by the fault detection unit. It is to be noted here that fault-tolerant 
operation will not work when both the current sensors become faulty. Thus, the operating principle of the 
faulty current sensor reconfiguration unit can be depicted as shown in Figure 4 and as represented by the 
generalized form as (19) and (20). 


lq fb = Iq + Nallar — la) (19) 


Ip fo = allg r est — Ip) + QnUp_r_est — Ip) + A + RaRp)Ig (20) 


Table 1. Sensor diagnostics and feedback a-ß-axis currents 
a-phase current sensor _b-phase current sensor Fault flag [0,0] _a-B-axis currents [Iu Ip 1] 


Healthy Healthy [0,0] la&lg 
Healthy Faulty [0,1] la& Ip est 
Faulty Healthy [1,0] Iq r& Ip r est 


Figure 4. Faulty current sensor reconfiguration 


3.2.2. Analysis of fault recovery transients 

The current sensor reconfiguration module comes into effect immediately when the particular 
current sensor fault is detected. The occurrence of simultaneous faults in all the working sensors is not 
noticed in practice [30]. It is presumed here that the speed sensor is working properly during the current 
sensor fault. However, it is observed that there is a small transient in response during fault reconfiguration. 
Taking switching from normal d-q axis control to the shifted d-q axis control. 


Va fte = Va + AVa (21) 
Va tc = Vq + AV, (22) 
94 Ftc = Fe + AB, (23) 


Where AVq and AV, are the synchronous frame voltage differences. AQ. is the phase difference between the 
pre-fault and the post-fault controller. Considering the d-axis aligning with the a-axis, from inverse park 
transform, the corresponding Vx and Ve fte - 


Single current sensor based fault tolerant control of interior permanent magnet ... (Sankhadip Saha) 


680 m) ISSN: 2502-4752 
Vz = Vacos0, — V,sin@, (24) 
Va fte = Va + AVg)cos(@, + 40e) — (V, + AV,)sin(O, + 40e) (25) 
Thus, the change of Va when the FTC comes into action. 


AV = Va fte -W= Va [cose Ftc — cosbe] — Va [Sinbe_ fte — sinbe] — JAV; [sin (be fte —) (26) 


|AV,| = lav2 + AV2, = tan™ (Z) (27) 


For the encoder-based speed control loop, because of inertia, motor speed and angular position do not change 
suddenly at the instant of the current sensor fault. Therefore, AV, = |AV,|sin(@ — Oe fte) ; [Oe fte = el. 
Thus, AV, depends on the difference between the magnitudes of the voltages before and after FTC. 
The AVq and AV, , in turn, depend on the change in output of the current controller on the d-axis and the q- 
axis, respectively. If the change in the d-q axis current can't be reduced quickly, the presented FTC approach 
may fail. According to (1), the d-axis and the q-axis currents are mutually coupled, i.e. any change in either 
axis (d or q) current may affect the other axis (d or q) current. To remove the current coupling effect, voltage 
decoupler is employed as given in (13) and (14) so that the d-axis and the q-axis voltage regulation becomes 
fast and independent. As a consequence, the current response may be improved, and the proposed FTC is 
fruitful. 


where 


4. RESULTS FOR THE PROPOSED FTC METHOD 

The proposed FTC method is verified on a 100 kW, 8-pole IPMSM drive setup developed in the 
MATLAB/Simulink environment. The machine parameters are listed in Table 2. The SVPWM switching 
frequency of the three-phase voltage source inverter is set to 20 kHz. It is worth mentioning that all the 
control signals are represented by per-unit (p.u) to create scalable control system laws. Since most of the 
DSPs use fixed point arithmetic and hence to improve the computational performance, the per unit 
representation is preferred over SI unit. Therefore, in terms of p.u representation, the motor parameters 
are calculated as base voltage = 167.4316 volt, base current = 517 amp, base speed = 3102 rpm and base 
torque = 220.5991 N-m. The control system always follows the MTPA scheme irrespective of the activation 
of the FTC mechanism. The controller parameters are given in Table 3. 


Table 2. IPMSM specifications 


Parameter Value Parameter Value 
Nominal Power (P,,) 100 Kw Maximum Angular Velocity (@m) 6500 rpm 
Nominal Torque (Tn) 200 Nm Nominal d-Axis Inductance (Lan) 0.00017416 H 
Nominal DC link Voltage (Vaen) 290 V Nominal q-Axis Inductance (Lgn)  0.00029269 H 
Nominal Permanent Magnet Flux (Ym) 0.0711 Stator Resistance (Rs) 0.0083 Ohm 
Maximum Phase Current (Im) Wb Number of Pole Pair (P,) 4 
450A 


Table 3. Controller parameters 


Controller K, Ki 
Speed Controller 8 90 
d-axis Current Controller 3 100 
q-axis Current Controller 3 100 


Current sensor fault diagnosis performance is shown in Figure 5. It is presumed that the drive 
control system is started with all the sensors working properly. A complete outage of the b-phase current 
sensor occurs at t=10sec while the system is operating at rated speed with rated load. As shown in the 
zoomed portion of the first dashed box in Figure 5, the current sensor fault is detected at t=10.0001 sec. 
Before the current sensor faulty condition, the current residual (€,) is smaller than the preset threshold (&,). 
As shown in the zoomed portion of the second dashed box in Figure 5, at t=10sec, the current residual (€,) is 
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increased from 0.00001 to 0.348, which is greater than the preset threshold. Consequently, the current sensor 
fault detection flag is enabled for switching to FTC operation. 

In Figure 6, the FTC performance of the drive is evaluated at rated speed with rated load. The graph 
in Figure 6(a) shows that the drive control system can successfully switch to FTC after a b-phase current 
sensor fault at t=10 sec. Zoomed portion of Figure 6(b) shows the transient performance of the speed 
response. According to Table 1, the alpha-axis current (Ix) and the estimated beta-axis current (Ig) are 
selected by the reconfiguration module for FTC, as shown in Figure 6(c) and Figure 6(d). 
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Figure 5. Performance of current sensor fault diagnosis 
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Figure 6. Evaluation of FTC performance at rated speed with rated load (a) speed control performance, 
(b) d-q axis current, (c) a-axis current, and (d) B-axis current 


Figure 7 shows the dynamic performance of the drive for ramp speed change under rated load post 
b-phase current sensor fault at t=3 sec. It is also seen that the single current sensor-based FTC takes over to 
continue the stable operation at a low speed of 0.1 p.u, as depicted in Figure 7(a), in Figure 7(b) d-q axis 
current, in Figure 7(c) a-axis current and in Figure 7(d) B-axis current 
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The FTC designed for EV applications must be robust towards certain external load variations. 
Therefore, the proposed FTC method, evaluated for such an operating condition of the drive, is shown in 
Figure 8. When the drive is operating under no load, the b-phase current sensor becomes faulty at t=3sec, and 
FTC turns into operation t=3 sec onwards. Rated step load is applied and subsequently removed at t=5sec and 
t=10sec, respectively as shown in Figure 8(a) speed control performance, Figure 8(b) d-q axis current, Figure 
8(c) a-axis current, and Figure 8(d) B-axis current. The dynamic performance of the different operational 
conditions for all the cases mentioned above is given in Table 4. 


speed (p.u)— 
d-q axis current (p.u)— 


0 2 4 6 8 10 12 14 16 18 20 0 2 4 6 8 10 12 14 16 18 20 
time (s)—> time (s)—> 
(a) (b) 
t RAR A A 
ae hl A Tosh AAA ite 
2° RR RAR ERE ii $ RRB EB 
ERTL EE i OH 
HHT ji TREHI: 
a poh age H nÀ: = H f= 
Š i ie a te eae 
270 2.80 2.90 300 3.10 3.20 330 2.70 2.80 290 3.00 3.10 3.20 3.30 
time (s)—> time (s)—> 
(c) (d) 


Figure 7. Evaluation of FTC performance during acceleration with rated load (a) speed control performance, 
(b) d-q axis current, (c) a-axis current, and (d) B-axis current 


speed (p.u)— 
d-q axis current (p.u)— 


0 2 4 6 8 10 12 14 16 18 20 
time (s)—> 


(b) 


a-axis current (p.u)— 
8-axis current (p.u)— 


k 2.97 2.98 2.99 3.00 3.01 3.02 3.03 ° "2.97 2.98 2.99 3.00 3.01 3.02 3.03 
time (s)> time (s)—> 
(c) (d) 


Figure 8. Evaluation of FTC performance sudden step load change (a) speed control performance, 
(b) d-q axis current, (c) a-axis current, and (d) B-axis current 
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Table 4. Dynamic characteristic for FTC performance of the drive 


Drive operating condition Load Current Current Speed Speed Speed settling 
application sensor fault sensor fault overshoot undershoot time (sec) 
time (sec) occurring detection time (%) (%) 
time (sec) (sec) 
i) Rated speed with rated load t= 0 sec t= 10 sec t= 10.0001 se <2% 0% t= 10.4 sec 
ii) Acceleration with rated load t= 0 sec t=3 sec t= 3.0001 sec <15% 0% t= 3.4 sec 
iii) Rated speed with step load = t=3 sec t=3.0001sec (<0.01% 0% t= 3.3 sec 
(Load applied at t=5 sec & load t=5 sec | 0% : 11% | t= 5.6 sec 
removed at t=10 sec) t= 10 sec <10% 0% t= 10.6 sec 


Like the current sensor fault detection performance, as depicted in Figure 5, the current sensor fault 
detection time for the last two cases (as depicted in Figures 7 and 8) is also found to be 0.0001 sec. It can also 
be noted that the proposed FTC is found fully applicable for a-phase current sensor fault. Hence, single 
current sensor-based continuous drive control can be ensured through by presented FTC method. Table 5 
provides the nomenclature used in this paper. 


Table 5. Nomenclature 


Symbol Parameter Symbol Parameter 
Va Va The d-axis and q-axis stator voltages Vo Vp The a-axis and ß-axis stator voltages 
la lq The d-axis and q-axis stator currents Ty Ip The a-axis and B-axis stator currents 
La Lg The d-axis and q-axis inductances lo est The a-axis estimated stator current 
Im The maximum phase current Tp est The B-axis estimated stator current 
Vac The nominal dc link voltage lat The transformed a-axis stator current 
Y, Pp The magnetic flux linkage and the number of pole pair lpr The transformed -axis stator current 
(Y The reference electrical speed latest The transformed a-axis estimated stator currents 
We, 9, The rotor electrical speed and the rotor electrical position Ig rest The transformed B-axis estimated stator currents 
Rg, Te The stator resistance and the electromagnetic Torque Qa The a-phase current sensor fault detection flag 
Pa Ta The nominal power and the nominal torque Op The b-phase current sensor fault detection flag 


5. REAL-TIME VIABILITY WITH PIL TEST 

From the literature survey [7], [10], [12], [17], [23], [24], it has been found that experimental 
validation of the drive control system often requires costly equipment with high sampling frequency like 
dSPACE, OPAL-RT and FPGA boards etc. To signify the real-time viability of the proposed fault-tolerant 
control method using cost-effective microprocessors, the PIL simulation test using the dual-core DSP 
TMSF28379D from Texas Instruments® is conformed. In the PIL testing framework, the embedded processor 
runs both the control loop and current sensor fault detection logic, whereas the part of the model, including 
the voltage source inverter, IPMSM, and feedback sensors, is implemented in MATLAB/Simulink. Although 
the DSP TMSF28379D is a 200 MHz dual-core processor, but only one core is utilized in the PIL test. The 
maximum execution time of the method is found to be 0.0093 ms (one iteration of the algorithm). To 
optimize the overall execution time, less critical functionalities like speed loop calculations can be moved to 
a slower rate of 200 Hz (one-tenth of current loop). Hence, current loop calculations and fault diagnostic 
module are executed at a sampling rate of 20 kHz. As a result, only 37% of the computational resources of 
one DSP core are used. Thus, the proposed fault tolerant control (FTC) method can be well implemented on 
inexpensive DSPs for real-time deployment. The experimental setup for the PIL arrangement is shown in 
Figure 9. 
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Figure 9. PIL experimental setup 
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6. CONCLUSION 

The presented FTC method is capable of fail-safe non-stop operation of the IPMSM drive with only 
one healthy current sensor when the other current sensor becomes faulty. The drive control system follows 
the MTPA control scheme. To cancel the cross-coupling effect and to lower the saturation effect of current 
controllers during the faulty condition, decoupling feed-forward compensation is implemented to improve the 
transient performance. The speed tracking performance of the drive control system addresses issues related to 
the electric vehicle. In order to assess the feasibility of embedded controller implementation, PIL simulation 
is preferred nowadays for EV software testing. Therefore, the ability of the fault tolerant control to maintain 
uninterrupted operation of the IPMSM drive is verified experimentally through the extensive PIL simulation. 
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